Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-V83P-XWM9-V4G8
HistoryFeb 10, 2022 - 11:06 p.m.

Injection in Apache Archiva

2022-02-1023:06:22
CWE-74
GitHub Advisory Database
github.com
15

0.013 Low

EPSS

Percentile

85.8%

JSON

Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.

CPENameOperatorVersion
org.apache.archiva:archivalt2.2.5

Related

osv 2
cvelist 1
githubexploit 1
prion 1
openvas 1
veracode 1
checkpoint_advisories 1
cve 1
osv
osv
CVE-2020-9495
2020-06-19 19:15:12
Injection in Apache Archiva
2022-02-10 23:06:22
cvelist
cvelist
CVE-2020-9495
2020-06-19 18:59:20
githubexploit
githubexploit
Exploit for Injection in Apache Archiva
2020-07-29 19:57:32
prion
prion
Code injection
2020-06-19 19:15:00
openvas
openvas
Apache Archiva < 2.2.5 LDAP Injection Vulnerability
2020-06-23 00:00:00
veracode
veracode
LDAP Injection
2020-06-22 05:01:18
checkpoint_advisories
checkpoint_advisories
Apache Archiva Command Injection (CVE-2020-9495)
2020-08-31 00:00:00
cve
cve
CVE-2020-9495
2020-06-19 19:15:00

0.013 Low

EPSS

Percentile

85.8%

JSON
Related for GHSA-V83P-XWM9-V4G8
osv2cvelist1githubexploit1prion1openvas1veracode1checkpoint_advisories1cve1